theorem
  x in dom p implies x is Element of NAT;
